HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Southern California University of Health Sciences
bd_b90a4f569589d9e0 · schema v1 · pii pii-v1
Full breach record for Southern California University of Health Sciences →Southern California University of Health Sciences (SCUHS) notified the New Hampshire Attorney General on May 18, 2026, of a data event affecting two NH residents. Unauthorized activity occurred between March 23-24, 2026, resulting in the viewing and copying of files containing names and Social Security numbers. SCUHS engaged outside cybersecurity specialists, conducted a comprehensive review, and provided 12 months of credit monitoring via Kroll to affected individuals.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_6274102dfa5ded98Indiana State AGfiled 2026-05-18Verified by operator
- bd_8fb33406b14e9099California State AGfiled 2026-05-19(1d gap)Verified by operator
- bd_a44cfd69c101fa78Maine State AGfiled 2026-05-19(1d gap)Verified by operator
- bd_c6e1f66e835a5eaaMassachusetts State AGfiled 2026-05-01(17d gap)Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/southern-california-university-health-sciences-20260518.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 18, 2026
- Raw hash
- 4f9befef6206432764216469a23f8b699e7999c243aee4b56a90a62d157c8808
Reporting entity
- Name
- Mullen Coughlin LLCnorm: mullen coughlin
Victim entity
- Name
- Southern California University of Health Sciencesnorm: southern california university of health sciences
- Domain
- scuhs.edu
Incident
- Discovered
- Mar 24, 2026
- Materiality determined
- —
- Notification sent
- May 18, 2026
- Affected individuals
- 2
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1041 Exfiltration Over C2 ChannelT1119 Automated Collection
- Threat actor
- External
- Regulator citations
- Notified New Hampshire Attorney General Consumer Protection & Antitrust BureauNotifying other state regulators, as required
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 8 weeks(55 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.